Organiza tus páginas con colecciones
Guarda y categoriza el contenido según tus preferencias.
En esta sección, se describen las diferentes capas de encriptación en el almacenamiento. Dispositivo aislado de Google Distributed Cloud (GDC)
Encriptación en reposo
El dispositivo aislado de GDC proporciona diferentes capas de encriptación de datos en reposo.
Encriptación en tránsito
Los datos en tránsito se encriptan con IPsec en dos tipos de tráfico de OTS:
Tráfico externo entre hosts de metal desnudo y máquinas virtuales de almacenamiento (SVM) de OTS.
Tráfico interno entre los nodos trabajadores de OTS.
La biblioteca de terceros strongSwan (https://strongswan.org/) implementa IPsec en ambos tráficos. El tráfico interno de OTS se compila con el túnel vxlan de OpenVSwitch y también usa strongSwan para encriptar el flujo de datos en la capa inferior.
[[["Fácil de comprender","easyToUnderstand","thumb-up"],["Resolvió mi problema","solvedMyProblem","thumb-up"],["Otro","otherUp","thumb-up"]],[["Difícil de entender","hardToUnderstand","thumb-down"],["Información o código de muestra incorrectos","incorrectInformationOrSampleCode","thumb-down"],["Faltan la información o los ejemplos que necesito","missingTheInformationSamplesINeed","thumb-down"],["Problema de traducción","translationIssue","thumb-down"],["Otro","otherDown","thumb-down"]],["Última actualización: 2025-09-04 (UTC)"],[[["\u003cp\u003eGoogle Distributed Cloud (GDC) air-gapped appliance encrypts all customer content stored at rest by default.\u003c/p\u003e\n"],["\u003cp\u003eThe GDC air-gapped appliance storage layer uses dm-crypt with the Linux Unified Key Setup (LUKS) extension for encryption.\u003c/p\u003e\n"],["\u003cp\u003eBlock and object encryption are available to provide double encryption for increased security.\u003c/p\u003e\n"],["\u003cp\u003eData in transit is encrypted, using a secure mode for internal data and FIPS-compliant OpenSSL for external communication.\u003c/p\u003e\n"]]],[],null,["# Data encryption\n\n| **Important:** To access the URLs on this page, you must connect to the internet. The URLs are provided for use when you have such access.\n\nThis section describes the different layers of encryption in storage. Google Distributed Cloud (GDC) air-gapped appliance\n\n\nEncryption at rest\n------------------\n\nThere are different layers of data at rest encryption that GDC air-gapped appliance provides.\n\n\nEncryption in transit\n---------------------\n\nData in transit is encrypted using IPsec on two types of OTS traffic:\n\n- External traffic between bare metal hosts and OTS Storage Virtual Machines (SVMs).\n- Internal traffic between OTS worker nodes.\n\nThe IPsec on both traffic is implemented by the third party library strongSwan (\u003chttps://strongswan.org/\u003e). The OTS internal traffic is built with the OpenVSwitch vxlan tunnel and it also uses strongSwan to encrypt the data flow under the layer."]]
